Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/0f6e9928-9ffa-30e7-acfa-934318138962.roa
File:                     0f6e9928-9ffa-30e7-acfa-934318138962.roa (raw, json)
Hash identifier:          Fswbd1gvOCWsfYpFAKN/vRCAt7adV16TGjomDzV2q5w=
Subject key identifier:   C7:77:CF:DA:B1:7E:14:46:1F:8E:82:F1:D7:93:9D:E5:2C:49:A1:CC
Certificate issuer:       /CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
Certificate serial:       010D0C9F4328584D3704C2AA73D76A185D6ADC80
Authority key identifier: 50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/0f6e9928-9ffa-30e7-acfa-934318138962.roa
Signing time:             Thu 19 Mar 2026 01:00:31 +0000
ROA not before:           Thu 19 Mar 2026 01:00:31 +0000
ROA not after:            Wed 17 Jun 2026 01:00:31 +0000
asID:                     26042
IP address blocks:        142.249.164.0/24 maxlen: 24
                          142.249.165.0/24 maxlen: 24
                          142.249.166.0/24 maxlen: 24
                          142.249.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:37:04:c2:aa:73:d7:6a:18:5d:6a:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
        Validity
            Not Before: Mar 19 01:00:31 2026 GMT
            Not After : Jun 17 01:00:31 2026 GMT
        Subject: CN=43ccb123-3e75-4d08-8945-999b8ab4e896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:15:e9:f7:a0:c6:69:cf:9b:c1:71:cd:d0:
                    a1:d3:da:13:d1:0c:f5:ab:a1:8d:83:1e:8c:f6:1f:
                    1d:62:f0:3d:c7:32:e5:93:e2:4e:3f:0b:7b:57:38:
                    10:b3:62:c3:7e:59:f8:a5:11:ed:d0:1e:e8:4b:a9:
                    3d:4d:40:c6:a2:bc:c1:62:81:ef:e3:b1:ca:93:8c:
                    58:4c:68:49:f6:4b:0c:51:ce:b7:58:36:63:a3:a8:
                    fd:da:67:02:a4:6b:47:0c:5a:ae:63:db:6e:c1:59:
                    fa:1f:3b:04:23:07:22:15:45:0a:c6:ee:d5:6b:65:
                    5f:da:8b:0a:35:ef:a8:43:6f:e4:20:a1:51:b2:ee:
                    1a:1e:d9:9e:3a:6c:3a:63:17:77:89:e7:0c:ce:c5:
                    57:db:78:af:52:71:99:a7:55:9c:9d:76:cc:a2:c5:
                    8e:a2:8d:e3:23:90:35:26:bc:1b:a0:10:2c:90:f4:
                    37:b7:d4:a8:4c:6f:c2:83:ab:f3:6e:4d:02:84:4c:
                    ff:1d:c6:8f:b2:94:c0:43:1e:68:21:a1:68:e1:90:
                    a2:2c:13:81:21:ce:17:83:da:45:85:45:76:14:3f:
                    83:8a:a7:5d:16:9b:61:c5:f6:93:cc:71:05:a3:27:
                    a9:8d:f9:fa:27:14:9f:d9:d6:2f:f9:52:c6:da:c9:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:77:CF:DA:B1:7E:14:46:1F:8E:82:F1:D7:93:9D:E5:2C:49:A1:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/0f6e9928-9ffa-30e7-acfa-934318138962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl

            X509v3 Authority Key Identifier:
                keyid:50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:89:40:87:6e:f4:40:5b:c8:8d:94:d8:ee:fa:a3:8b:a0:27:
         ea:79:97:c2:f9:65:01:c2:44:4f:53:02:ab:4e:0a:0e:48:16:
         e0:e8:27:21:57:0e:74:18:aa:18:b2:68:cf:6f:e1:17:00:e0:
         97:da:65:80:f2:dd:10:ac:9d:90:fb:e9:22:02:99:9b:26:35:
         d1:99:c3:1e:a0:18:19:15:8b:87:70:f3:a4:43:a3:9c:dd:fe:
         16:a0:6f:d5:cd:f5:79:3b:8e:29:54:90:1a:e0:0a:08:a6:af:
         2e:36:91:14:d6:a0:21:e4:2b:60:e0:61:35:6b:e6:5b:49:4e:
         1d:80:c2:c7:2b:36:04:e9:b7:a0:d6:c9:a6:a4:4f:4f:f5:a0:
         29:75:a9:a8:4e:49:64:7f:c5:40:fd:c3:8a:47:63:e8:e7:83:
         48:4d:3f:65:dd:3b:92:5c:ea:79:53:60:e4:58:97:59:ae:56:
         db:57:f2:4d:e0:79:98:6e:c1:a3:7d:89:03:e3:d7:e3:49:3f:
         1c:e2:75:38:98:31:60:59:59:4e:36:12:ae:e8:9c:19:18:7a:
         88:e5:74:5c:5c:dd:fd:1e:3a:42:79:bb:71:f3:e3:b0:cb:e9:
         1d:2c:7e:24:83:e8:2e:ad:68:6b:c5:7f:37:87:bb:5f:76:ff:
         81:40:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:57 2026 by rpki-client